CentOS docs - Sep 2009 - Contribution to wiki: nagios incompatibility with centos 5.2

Hi

I would like to contribute to the wiki.centos.org:
username: boel
subject: nagios incompatibility with centos 5.2
location: http://wiki.centos.org/HowTos/Nagios
content: A security feature of centos 5.2 SELinux prevents the access 
from the apache httpd server to the needed /var/nagios files. The error 
manifests itself in the /var/log/messages as "SELinux is preventing the 
tac.cgi from using potentially mislabeled files ./status.dat (var_t)". A 
workaround is to execute the command: chcon -R httpd_sys_content_t 
/var/nagios

Please grant me access

Regards
Martin Boel

On Mon, 2009-09-14 at 16:11 +0200, Martin Boel, Silverbullet
wrote:
> Hi
> 
> I would like to contribute to the wiki.centos.org:
> username: boel
Hmmm. We really do prefer FirstnameLastname.
> subject: nagios incompatibility with centos 5.2
> location: http://wiki.centos.org/HowTos/Nagios
> content: A security feature of centos 5.2 SELinux prevents the access 
> from the apache httpd server to the needed /var/nagios files. The error 
> manifests itself in the /var/log/messages as "SELinux is preventing
the
> tac.cgi from using potentially mislabeled files ./status.dat (var_t)".
A
> workaround is to execute the command: chcon -R httpd_sys_content_t 
> /var/nagios
Is that still the case in 5.3?

Ralph

Martin Boel, Silverbullet wrote:
> Hi
> 
> I would like to contribute to the wiki.centos.org:
> username: boel
> subject: nagios incompatibility with centos 5.2
> location: http://wiki.centos.org/HowTos/Nagios
> content: A security feature of centos 5.2 SELinux prevents the access 
> from the apache httpd server to the needed /var/nagios files. The error 
> manifests itself in the /var/log/messages as "SELinux is preventing
the
> tac.cgi from using potentially mislabeled files ./status.dat (var_t)".
A
> workaround is to execute the command: chcon -R httpd_sys_content_t 
> /var/nagios
> 
When I wrote the Nagios guide, it was easier and recommended to just 
turn SELinux off before going about installing and using Nagios. Seems 
that the Nagios doc site has some information now in regards to SELinux, 
but I never went back to visit that topic.

<http://wiki.nagios.org/index.php/Selinux>

Perhaps these can be incorporated into the guide if they are verified to 
work?

Regards,
Max

Hi

Thanks for you reply. I guess this should be fixed i the next nagios package or
next centos version, but for now the public should
be told about a workaround, that works with the current versions. There is quite
a lot of work hours in this simple workaround,
and some people may simply give up using this fantastic software.

Please grant me access.

Regards
Martin Boel

Hi

username: MartinBoel

Please grant me access.

Regards
Martin Boel